Behavioral task
behavioral1
Sample
04335744fe077e3a8268fa9cb947b8659a30e8da304705a072dddcb28e10cb2a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
04335744fe077e3a8268fa9cb947b8659a30e8da304705a072dddcb28e10cb2a.dll
Resource
win10v2004-20220812-en
General
-
Target
04335744fe077e3a8268fa9cb947b8659a30e8da304705a072dddcb28e10cb2a
-
Size
391KB
-
MD5
b267e7599b81711b1cde404810401a80
-
SHA1
10ad16db0b67fd05b8d149c50aa497df7a4f94fc
-
SHA256
04335744fe077e3a8268fa9cb947b8659a30e8da304705a072dddcb28e10cb2a
-
SHA512
4f30ffd75f5596342a3eb44321fec6d2bd4d08b09537070a6d6ed983ed4c8d7a11792a452a6a8b21cb43b505fe2231b04aea4fb7f20074f7dc8436d1e1c63c4d
-
SSDEEP
6144:RhqWkFqGNXYfwiGsj8VNA75eyVYAp5yi:RhqWkFHtbgey8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
04335744fe077e3a8268fa9cb947b8659a30e8da304705a072dddcb28e10cb2a.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE